
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
File: EB57B4A8B7DB581F45D8854952928F5926755B5D.mft (raw, json)
Hash identifier: +X781xYckn4MU40Qf9g8Td8SwpFIihOuUFgwBXlj590=
Subject key identifier: 61:67:C0:AC:5B:54:B2:9F:79:AB:86:AE:A0:5C:52:92:10:53:27:B2
Authority key identifier: EB:57:B4:A8:B7:DB:58:1F:45:D8:85:49:52:92:8F:59:26:75:5B:5D
Certificate issuer: /CN=EB57B4A8B7DB581F45D8854952928F5926755B5D
Certificate serial: 206E51413EFF486812E75F65F77119AF1F978F9B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
Manifest number: C0
Signing time: Mon 21 Sep 2026 21:07:45 +0000
Manifest this update: Mon 21 Sep 2026 21:02:45 +0000
Manifest next update: Wed 23 Sep 2026 00:58:45 +0000
Files and hashes: 1: EB57B4A8B7DB581F45D8854952928F5926755B5D.crl (hash: VQ7fNZATECg6JZEveL6AZZ98RLDOScNQ6E5w4AR7KCA=)
2: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: jRiKTU/j+tIlx8UR6dB8nvnEvGokztihjDnumCFG4MY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.crl
rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 00:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:6e:51:41:3e:ff:48:68:12:e7:5f:65:f7:71:19:af:1f:97:8f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB57B4A8B7DB581F45D8854952928F5926755B5D
Validity
Not Before: Sep 21 21:02:45 2026 GMT
Not After : Sep 23 00:58:45 2026 GMT
Subject: CN=6167C0AC5B54B29F79AB86AEA05C5292105327B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:71:db:2f:3d:f7:bb:6c:96:2d:1c:60:2d:
d8:36:bf:71:29:15:e8:bd:0c:5d:e1:38:a2:41:d1:
eb:41:ec:d0:f0:d9:61:9f:c1:ef:bc:80:59:7a:ef:
19:cc:24:6c:2f:a3:c6:92:63:74:c2:df:c5:0f:90:
94:2b:22:0e:cc:f5:6f:06:5d:62:ce:33:93:cb:8b:
5c:f6:7e:39:44:fc:50:54:8c:4f:55:a3:2d:ea:68:
10:16:a2:1e:f1:33:74:b0:3b:37:2a:3b:25:13:84:
af:ea:21:bb:fe:a6:7b:51:5e:2a:33:ee:91:5f:f1:
9e:39:85:0e:1b:c2:ef:3b:da:9b:6e:11:23:85:c6:
95:24:57:c5:72:24:d9:d3:84:ad:fc:a2:11:f1:83:
7f:4d:05:92:6b:39:42:f6:9f:1d:16:5c:65:e3:1a:
4a:9f:95:aa:72:95:bb:a1:43:e6:98:6f:6c:19:3a:
0c:28:02:3d:bd:1c:03:88:88:33:cb:11:ce:fe:e0:
f7:ea:2f:a2:77:b0:7f:03:84:0c:ff:22:08:a7:57:
63:89:f1:70:6e:41:9a:dc:34:ba:fb:66:d7:78:b2:
d3:38:fc:45:d9:c0:56:f6:f3:39:ba:85:ae:96:73:
cb:9a:7c:16:0c:81:fb:17:b8:8f:38:ac:57:aa:c5:
64:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:67:C0:AC:5B:54:B2:9F:79:AB:86:AE:A0:5C:52:92:10:53:27:B2
X509v3 Authority Key Identifier:
keyid:EB:57:B4:A8:B7:DB:58:1F:45:D8:85:49:52:92:8F:59:26:75:5B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:74:c6:a6:d2:72:58:90:4c:97:5d:a8:c1:b7:7d:88:24:47:
5a:c3:41:48:49:e4:ff:cd:17:22:56:a4:7d:58:4f:8f:8c:f2:
59:55:bc:b6:ce:8e:30:fb:9a:40:b1:01:44:f4:e0:bb:bc:13:
f5:d3:a8:5e:4c:66:c4:aa:66:e8:9c:00:a6:96:3d:6e:48:85:
46:70:fc:ad:cd:12:90:3c:ea:05:b7:2c:18:c5:df:75:f4:97:
b7:22:b5:37:84:30:5e:58:ae:3d:6f:ba:01:d7:1a:77:8e:e8:
ab:54:50:08:be:c2:77:b7:63:27:38:c8:3c:2e:5d:ba:97:a9:
7f:0d:08:02:a7:02:a1:b4:ae:4a:fa:65:3d:77:aa:e4:af:06:
7d:2d:f1:d7:ed:6e:7e:fe:53:a0:a9:df:1e:b9:d4:67:24:30:
1c:45:7a:08:8e:e6:bb:28:bb:f1:88:c8:bb:d4:4e:14:da:7c:
61:38:a0:66:d4:42:22:73:1a:4d:98:34:8a:f2:b8:f1:2d:90:
35:3b:1d:b0:a4:fe:71:61:90:62:22:fa:d3:b2:0c:07:18:20:
c0:48:70:50:d3:54:66:18:34:df:c6:8c:d9:07:d8:1c:c9:04:
bf:a4:22:ee:ac:5f:5a:ba:13:48:7f:99:00:3c:03:d4:68:55:
4f:bf:71:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:32:16 2026 by rpki-client